Include Security

209 posts

Include Security

Include Security

@IncludeSecurity

Simply stated: Give us any kind of app and we'll hack it better than the rest. Our clients include awesome tech companies in Silicon Valley, NYC, and beyond.

Brooklyn and the world Bergabung Mayıs 2012
1 Mengikuti1.6K Pengikut
Include Security
Include Security@IncludeSecurity·
Today our team at IncludeSec is releasing a site to help with key collision concerns. We've known for a while that private keys should not be shared, use this site to ensure they are not! ismyprivatekeypublic.com
English
0
2
3
541
Include Security
Include Security@IncludeSecurity·
New research🤩 on old tech👴! Our team's latest blog post demonstrates many ways memory vulnerabilities can occur in your legacy Delphi code despite being described as a "memory safe" language by the NSA. blog.includesecurity.com/2025/03/memory…
English
0
2
4
247
Include Security
Include Security@IncludeSecurity·
It's winter, so hacking space heater IoT devices to completely control their firmware seems like the thing to do! In our latest blog post, you'll see some of the things we do for our IoT/HW clients!! blog.includesecurity.com/2025/02/replac…
English
0
3
4
377
Include Security
Include Security@IncludeSecurity·
Hey folks, for those who like the HTB community we've done a collab contribution of a challenge box (free, no subscription needed), give it a spin if you like to hack the hackers! 🪓 👩‍💻 hackthebox.com/machines/backf… Hint: It's a tough box, check our github and our blog for info.
English
0
0
2
186
Include Security
Include Security@IncludeSecurity·
We're happy to sponsor great learning resources like @OpenSecTraining, the world is awash with a lot of bad training/certs, here's some courses that are solid and open/free!😀
OpenSecurityTraining2@OpenSecTraining

As the year comes to a close, we want to once again thank all of the individual and corporate donors who generously contributed to #OST2's nonprofit mission this year! You help ensure that OST2 will be around for years to come! ost2.fyi/Partnership.ht… Platinum Partners: @TrustedComputin ost2.fyi/Sponsorship.ht… Gold Sponsors & Windows Security Track sponsor Winsider Seminars & Solutions (@yarden_shafir & @aionescu) Gold Sponsors: @3mdeb_com @binarly_io @crowdfense @DarkMentorLLC @NCCGroupplc Bronze Sponsors: @cyber5w @IncludeSecurity And remember that the more Partners and Sponsors we get, the more instructors and classes we can support. So if your company sponsors conferences, you should ask them to sponsor OST2!

English
0
0
4
337
Include Security
Include Security@IncludeSecurity·
@hackaday Thanks for including some of our content @hackaday! Would you mind mentioning the Author/Company in your article? Keep that source credit going😀, thnx! We see you did it on last week's summary.
English
2
0
1
42
Include Security
Include Security@IncludeSecurity·
Who hacks the hackers? We do! Our new research on vulns in multiple common C2 frameworks used by netpen and red teams. If you use any of these take a look and patch up. blog.includesecurity.com
English
1
39
120
14.8K
Include Security
Include Security@IncludeSecurity·
It's always great to work on open source security, even better when it helps users who need secure and private access online!
Open Technology Fund@OpenTechFund

.@OpenTechFund’s Security Lab partner @IncludeSecurity’s security audit of VPN Generator (software that lets anyone provide a VPN to a small group) revealed that the tool only had 4 “low-risk” issues, 3 of which have already been fixed. Learn more ow.ly/XPZI50S8P7S

English
0
0
2
487
Include Security
Include Security@IncludeSecurity·
@kevinriggle This is the summercon after party bar every year, we've sponsored @SummerC0n many years and the staff there loves the hacker crew!
English
0
0
1
73
Include Security
Include Security@IncludeSecurity·
@kevinriggle this particular punk bar has been the host of many summerc0n after parties and we've spent many thousands there on "networking", the staff loves summercon every year!
English
0
0
1
69
Include Security
Include Security@IncludeSecurity·
We're glad everybody enjoyed our April fool's joke for 2024. See you can be serious about security but also have fun!
English
0
0
0
196
Include Security
Include Security@IncludeSecurity·
We released our new semgrep rules today. Given the recent news about executive orders from the Whitehouse, we thought it would be important to flag all of the code that doesn't meet federal standards. Memory Safety is serious stuff today: github.com/IncludeSecurit…
English
1
5
10
2.4K
Include Security
Include Security@IncludeSecurity·
We're still seeing a lot of Ruby code out there in the tech world. If we see it we hack it! Latest blog post on advanced Ruby deserialization gadget chains for exploitation of application is up blog.includesecurity.com/2024/03/discov…
English
0
5
14
1.1K
Include Security
Include Security@IncludeSecurity·
It’s here folks, here’s an actually deeper dive into the topic of LLM prompt injection; Much more complete than all the fluff you see out there on the topic today. If you like under-the-hood AI context, this one is for you. blog.includesecurity.com/2024/02/improv…
English
1
4
4
690